城市(city): unknown
省份(region): unknown
国家(country): unknown
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 142.93.216.97 | attackspam | SSH Brute Force |
2020-09-23 23:16:31 |
| 142.93.216.97 | attackbotsspam | Sep 22 20:18:56 hanapaa sshd\[16387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.97 user=root Sep 22 20:18:58 hanapaa sshd\[16387\]: Failed password for root from 142.93.216.97 port 50322 ssh2 Sep 22 20:23:20 hanapaa sshd\[16719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.97 user=root Sep 22 20:23:22 hanapaa sshd\[16719\]: Failed password for root from 142.93.216.97 port 59966 ssh2 Sep 22 20:27:54 hanapaa sshd\[17100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.97 user=root |
2020-09-23 15:30:35 |
| 142.93.216.97 | attack | Sep 23 01:15:21 piServer sshd[2469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.97 Sep 23 01:15:23 piServer sshd[2469]: Failed password for invalid user ahmed from 142.93.216.97 port 55418 ssh2 Sep 23 01:19:37 piServer sshd[3087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.97 ... |
2020-09-23 07:23:48 |
| 142.93.216.97 | attack | Sep 16 14:22:44 pornomens sshd\[5538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.97 user=root Sep 16 14:22:46 pornomens sshd\[5538\]: Failed password for root from 142.93.216.97 port 47298 ssh2 Sep 16 14:28:13 pornomens sshd\[5606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.97 user=root ... |
2020-09-17 01:59:29 |
| 142.93.216.97 | attack | SSH Brute Force |
2020-09-16 18:16:28 |
| 142.93.216.68 | attackspam | 2020-08-28T04:05:16.766901hostname sshd[18188]: Invalid user evelyn from 142.93.216.68 port 36100 2020-08-28T04:05:19.147483hostname sshd[18188]: Failed password for invalid user evelyn from 142.93.216.68 port 36100 ssh2 2020-08-28T04:09:12.331442hostname sshd[19739]: Invalid user pieter from 142.93.216.68 port 41426 ... |
2020-08-28 05:14:22 |
| 142.93.216.68 | attack | Aug 20 08:32:38 ny01 sshd[19239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.68 Aug 20 08:32:40 ny01 sshd[19239]: Failed password for invalid user kafka from 142.93.216.68 port 33572 ssh2 Aug 20 08:34:52 ny01 sshd[19543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.68 |
2020-08-20 20:52:15 |
| 142.93.216.68 | attackbotsspam | Aug 20 05:58:16 vmd26974 sshd[15433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.68 Aug 20 05:58:18 vmd26974 sshd[15433]: Failed password for invalid user hdis_mng from 142.93.216.68 port 45634 ssh2 ... |
2020-08-20 13:43:49 |
| 142.93.216.97 | attackspambots | 2020-08-18T07:53:53.127152ks3355764 sshd[6863]: Failed password for invalid user wenbin from 142.93.216.97 port 45812 ssh2 2020-08-18T09:54:05.641164ks3355764 sshd[8179]: Invalid user kr from 142.93.216.97 port 51930 ... |
2020-08-18 17:14:32 |
| 142.93.216.97 | attack | Aug 17 18:03:39 dhoomketu sshd[2427134]: Failed password for invalid user benjamin from 142.93.216.97 port 60924 ssh2 Aug 17 18:08:16 dhoomketu sshd[2427270]: Invalid user ubuntu from 142.93.216.97 port 44228 Aug 17 18:08:16 dhoomketu sshd[2427270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.97 Aug 17 18:08:16 dhoomketu sshd[2427270]: Invalid user ubuntu from 142.93.216.97 port 44228 Aug 17 18:08:18 dhoomketu sshd[2427270]: Failed password for invalid user ubuntu from 142.93.216.97 port 44228 ssh2 ... |
2020-08-17 20:49:20 |
| 142.93.216.97 | attackbots | Bruteforce detected by fail2ban |
2020-08-13 16:50:17 |
| 142.93.216.97 | attackbots | Aug 12 15:45:54 vmd36147 sshd[12017]: Failed password for root from 142.93.216.97 port 37176 ssh2 Aug 12 15:50:37 vmd36147 sshd[22589]: Failed password for root from 142.93.216.97 port 47474 ssh2 ... |
2020-08-13 00:25:38 |
| 142.93.216.97 | attack | 2020-08-11T01:59:39.0186481495-001 sshd[65383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.97 user=root 2020-08-11T01:59:41.6033341495-001 sshd[65383]: Failed password for root from 142.93.216.97 port 54248 ssh2 2020-08-11T02:01:58.0350441495-001 sshd[65495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.97 user=root 2020-08-11T02:01:59.8371401495-001 sshd[65495]: Failed password for root from 142.93.216.97 port 59724 ssh2 2020-08-11T02:04:22.9198341495-001 sshd[408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.97 user=root 2020-08-11T02:04:24.4910341495-001 sshd[408]: Failed password for root from 142.93.216.97 port 37046 ssh2 ... |
2020-08-11 18:06:24 |
| 142.93.216.68 | attackbotsspam | Aug 4 20:32:04 OPSO sshd\[9456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.68 user=root Aug 4 20:32:07 OPSO sshd\[9456\]: Failed password for root from 142.93.216.68 port 47110 ssh2 Aug 4 20:36:27 OPSO sshd\[10618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.68 user=root Aug 4 20:36:29 OPSO sshd\[10618\]: Failed password for root from 142.93.216.68 port 58406 ssh2 Aug 4 20:40:54 OPSO sshd\[11464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.68 user=root |
2020-08-05 05:30:58 |
| 142.93.216.157 | attack | Lines containing failures of 142.93.216.157 Aug 2 07:14:21 linuxrulz sshd[12011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.157 user=r.r Aug 2 07:14:23 linuxrulz sshd[12011]: Failed password for r.r from 142.93.216.157 port 54234 ssh2 Aug 2 07:14:24 linuxrulz sshd[12011]: Received disconnect from 142.93.216.157 port 54234:11: Bye Bye [preauth] Aug 2 07:14:24 linuxrulz sshd[12011]: Disconnected from authenticating user r.r 142.93.216.157 port 54234 [preauth] Aug 2 07:26:49 linuxrulz sshd[13828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.216.157 user=r.r Aug 2 07:26:51 linuxrulz sshd[13828]: Failed password for r.r from 142.93.216.157 port 42002 ssh2 Aug 2 07:26:52 linuxrulz sshd[13828]: Received disconnect from 142.93.216.157 port 42002:11: Bye Bye [preauth] Aug 2 07:26:52 linuxrulz sshd[13828]: Disconnected from authenticating user r.r 142.93.216.157 po........ ------------------------------ |
2020-08-03 03:11:46 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.216.165
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1039
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.93.216.165. IN A
;; AUTHORITY SECTION:
. 205 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 09:45:20 CST 2022
;; MSG SIZE rcvd: 107165.216.93.142.in-addr.arpa domain name pointer 246961.cloudwaysapps.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
165.216.93.142.in-addr.arpa name = 246961.cloudwaysapps.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 177.1.214.84 | attackbotsspam | Feb 22 19:49:03 plusreed sshd[26548]: Invalid user halflife from 177.1.214.84 ... |
2020-02-23 09:02:16 |
| 144.217.34.148 | attackbots | firewall-block, port(s): 30718/udp |
2020-02-23 09:25:59 |
| 114.33.160.87 | attack | Automatic report - Port Scan Attack |
2020-02-23 09:21:17 |
| 103.218.26.241 | attackbots | Automatic report - Port Scan Attack |
2020-02-23 09:05:44 |
| 37.252.69.10 | attack | Telnetd brute force attack detected by fail2ban |
2020-02-23 09:30:40 |
| 82.81.45.35 | attackbotsspam | Automatic report - Port Scan Attack |
2020-02-23 09:21:38 |
| 185.153.199.242 | attack | Feb 23 02:14:32 debian-2gb-nbg1-2 kernel: \[4679676.672935\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.153.199.242 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=48951 PROTO=TCP SPT=41390 DPT=2106 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-02-23 09:36:30 |
| 187.188.129.165 | attack | firewall-block, port(s): 1433/tcp |
2020-02-23 09:04:27 |
| 114.35.55.5 | attackbots | Automatic report - Port Scan Attack |
2020-02-23 09:07:01 |
| 106.13.233.186 | attack | Feb 23 02:11:58 localhost sshd\[19114\]: Invalid user sinusbot from 106.13.233.186 Feb 23 02:11:58 localhost sshd\[19114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.233.186 Feb 23 02:12:00 localhost sshd\[19114\]: Failed password for invalid user sinusbot from 106.13.233.186 port 45639 ssh2 Feb 23 02:13:20 localhost sshd\[19161\]: Invalid user svnuser from 106.13.233.186 Feb 23 02:13:20 localhost sshd\[19161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.233.186 ... |
2020-02-23 09:26:37 |
| 45.133.99.2 | attackspambots | Feb 23 02:29:32 mailserver postfix/smtps/smtpd[20805]: connect from unknown[45.133.99.2] Feb 23 02:29:39 mailserver dovecot: auth-worker(20800): sql([hidden],45.133.99.2): unknown user Feb 23 02:29:41 mailserver postfix/smtps/smtpd[20805]: warning: unknown[45.133.99.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 23 02:29:42 mailserver postfix/smtps/smtpd[20805]: lost connection after AUTH from unknown[45.133.99.2] Feb 23 02:29:42 mailserver postfix/smtps/smtpd[20805]: disconnect from unknown[45.133.99.2] Feb 23 02:29:42 mailserver postfix/smtps/smtpd[20805]: connect from unknown[45.133.99.2] Feb 23 02:29:50 mailserver postfix/smtps/smtpd[20805]: lost connection after AUTH from unknown[45.133.99.2] Feb 23 02:29:50 mailserver postfix/smtps/smtpd[20805]: disconnect from unknown[45.133.99.2] Feb 23 02:29:50 mailserver postfix/smtps/smtpd[20805]: connect from unknown[45.133.99.2] Feb 23 02:29:58 mailserver dovecot: auth-worker(20800): sql(helene.geiger,45.133.99.2): unknown user |
2020-02-23 09:36:43 |
| 102.164.4.203 | attack | Automatic report - Port Scan Attack |
2020-02-23 09:20:34 |
| 45.65.196.14 | attackspambots | Feb 23 01:48:50 |
2020-02-23 09:03:04 |
| 168.194.160.47 | attackspam | $f2bV_matches |
2020-02-23 09:28:53 |
| 182.61.182.50 | attackbotsspam | SSH bruteforce |
2020-02-23 09:01:11 |